Privacy Policy

Last updated: 14 August 2025

1. Data We Collect

Name, contact details, case details (e.g., username, email, phone, image, domain), and any files you upload.

2. How We Use Your Data

• Deliver requested services
• Communicate about your request
• Maintain records for compliance

3. Data Handling & Security

• Encrypted storage.
• 30‑day retention post‑delivery, then deletion.
• No sale of personal data.

4. Legal Basis for Processing

• NZ — Privacy Act 2020.
• UK/EU — GDPR/UK GDPR (consent, contract, legitimate interests).
• US — State privacy laws; consent/contract.

5. International Transfers

Standard Contractual Clauses and adequacy decisions where applicable.

6. Your Rights

Access, correction, deletion before the 30‑day limit; opt‑out of non‑essential comms. Contact shadowsys.secure@proton.me.

7. Third‑Party Services

Netlify Forms & ProtonMail handle submissions; payment via third‑party processor (we store no card details).

8. Cookies

• Minimal performance/analytics only.
• EU/UK users see consent banner.
• Opt‑out via browser settings.